9.9 CriticalCWE-863
CVE-2026-41283
OpenStack Mistral vulnerability
OpenStackMistral
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.7%probability of exploitation in the next 30 days
Higher than 54% of scored CVEs
SeverityCVSS
9.9Critical
Description NVD
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
Coverage 1 article · 1 outlet
- CVE-2026-41283 flaw in OpenStack Mistral lets hackers run codeSecurityOnline · first in our coverage